Privacy Policy

1. Scope and operator

This policy applies to the Naggy Buddy Chrome extension, Buddy+ purchases and license validation, the public Naggy Buddy website, and privacy or support requests sent to us.

Operator information

Name

Jimin Lee

Operator type

Individual

Country

Republic of Korea

Contact

my.nagging.ai@gmail.com

In this policy, "Naggy Buddy", "we", "us", and "our" refer to this operator and the Naggy Buddy product.

This policy does not apply to third-party websites that a user chooses as nudge sites. Naggy Buddy does not control those websites or their privacy practices.

2. Privacy summary

Naggy Buddy's reminder and tracking features run locally in the extension. Naggy Buddy has no user account system, analytics, advertising, telemetry, cloud sync, remote logging, or Naggy Buddy server.

Browsing activity, selected hostnames, reminder state, and page content are not sent to us or Lemon Squeezy. The only automatic external runtime requests are Buddy+ license activation, validation, and deactivation requests made after a user chooses to activate Buddy+.

3. Information processed only on the user's device

Naggy Buddy stores only the information needed to provide reminders and manage Buddy+:

• normalized hostnames selected as nudge sites and their registration order
• reminder interval, app language, browser-start preference, Deep Nudge preference, and pause state
• current reminder-session timing, temporary inactive state, and duplicate-reminder markers
• temporary permission-request state, which is cleared when the request finishes or Chrome restarts
• Buddy+ license key, Lemon Squeezy-issued license instance ID, license status, validation timestamps, short error state, and a local revision number when Buddy+ is activated

Naggy Buddy checks the focused active tab's hostname to decide whether a selected site is active. It may also check whether visible video or audible media is playing so idle or locked time is handled correctly. These checks run locally.

Naggy Buddy does not read or store page text, page titles, query strings, URL paths, form data, messages, cookies, or full browsing history. Full URLs are normalized to hostnames before reminder state is stored. Browser-internal pages, extension pages, local files, non-HTTP URLs, and Chrome Web Store pages are not tracked or saved as nudge sites.

The operator cannot remotely access information stored in the extension's Chrome storage.

4. Information processed for Buddy+ and support

Naggy Buddy processes a limited amount of information outside the extension only when a user chooses a related service.

Buddy+ license validation

When a user activates Buddy+, the extension sends the following information over HTTPS to the Lemon Squeezy License API:

• the license key entered by the user
• the fixed instance name Naggy Buddy Chrome Extension during activation
• the Lemon Squeezy-issued license instance ID during later validation or deactivation
• standard connection information received by Lemon Squeezy, such as IP address, browser or user-agent information, and request time

This information is used to activate, validate, or deactivate Buddy+ access, enforce the activation limit, prevent license abuse, and provide purchased features. Selected sites, full URLs, page text, reminder state, and browsing activity are never included in these requests.

The License API may return order and customer metadata. The extension uses only the product, license, status, and instance information needed to confirm entitlement. It does not store the customer's name, email address, or the raw API response. Automatic validation normally occurs no more than once every 24 hours when Chrome gives the extension an opportunity to run. A request may also occur when the user explicitly activates, refreshes, or deactivates Buddy+.

Buddy+ checkout and order records

When a user opens the Buddy+ checkout, the user leaves Naggy Buddy and completes the purchase on Lemon Squeezy's website. Lemon Squeezy acts as the merchant of record and directly processes checkout information such as the buyer's name, email address, billing and payment information, tax information, and standard website or device logs under its own privacy policy and buyer terms.

The Naggy Buddy operator may view order records made available in the Lemon Squeezy merchant dashboard, including the buyer's name and email address, country or postal information, product and order details, license status, amount, tax or refund status, and card brand. We use this information only to fulfill purchases, administer licenses, provide support, handle refunds or disputes, prevent fraud, and meet legal or accounting obligations. We do not receive a buyer's full payment-card number or card security code, and we do not maintain a separate Naggy Buddy customer database.

Support messages

If a user contacts us by email, we receive the sender's email address, message, attachments, email headers, and any other information the sender chooses to include. We use it only to respond, provide support, administer a purchase or license, resolve disputes, protect the service, or comply with law.

5. Service providers and international processing

Where personal information must be processed outside the user's country to provide a user-requested service, we disclose the relevant processing below.

Lemon Squeezy separately and directly processes checkout and payment information as merchant of record. Its independent processing is governed by Lemon Squeezy's Privacy Policy and Buyer Terms.

The public Naggy Buddy website is hosted using GitHub Pages. A visitor's browser connects directly to GitHub, which may process standard connection and device information under the GitHub General Privacy Statement. Naggy Buddy does not receive GitHub's underlying server logs and does not add analytics, advertising, tracking pixels, contact forms, or account features to the website.

6. Legal bases

Where applicable law requires a legal basis, we rely on one or more of the following:

• performance of a contract or steps requested by the user, including Buddy+ licensing, purchases, refunds, and support
• the user's request or consent, including granting optional site access, initiating Buddy+ activation, or sending a support message
• our legitimate interests in operating and securing the product, preventing fraud and license abuse, and responding to support requests
• compliance with legal, tax, accounting, consumer-protection, and dispute-resolution obligations

Optional site access and Buddy+ activation can be withdrawn as described below.

7. Retention and deletion

• Local settings and reminder state remain in Chrome storage until the user changes them or removes the extension.
• Temporary permission-request state is cleared when the request finishes or Chrome restarts.
• A user can remove nudge sites, revoke site access in Chrome, pause reminders, and turn off Deep Nudge.
• Deactivating Buddy+ removes the locally stored activation after Lemon Squeezy confirms deactivation. Removing the extension clears its local Chrome storage.
• Naggy Buddy does not export Lemon Squeezy order records into a separate customer database. If a record must be retained separately for tax, accounting, consumer-protection, fraud, refund, or dispute obligations, it is kept only for the applicable legal period. This may be up to five years for contract or payment records and three years for consumer complaint or dispute records under Korean law.
• Support messages are retained for up to three years after the inquiry is resolved, unless earlier deletion is appropriate or longer retention is required to comply with law or establish, exercise, or defend a legal claim.

When information under our control is no longer needed, we delete it from the active mailbox, local working files, or other systems under our control and allow provider backups to expire under the provider's normal retention cycle. Naggy Buddy does not ordinarily create paper records. Any paper record that must be destroyed will be shredded or otherwise made unreadable. Lemon Squeezy and Google control deletion from their own independent systems under their respective policies and legal obligations.

8. Sharing, sale, and advertising

Naggy Buddy does not sell personal information, share it for targeted advertising, or use it for credit decisions. It does not allow people to read browsing activity or page content.

Information is disclosed only to the service providers described in this policy, when the user requests the related service, or when required to comply with law, enforce rights, prevent fraud, or protect users and the service.

9. User rights

Depending on location, a user may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, withdraw consent, and complain to a data-protection authority.

Most extension data is available only on the user's device and can be controlled directly by changing settings, removing sites, revoking permissions, deactivating Buddy+, or removing the extension. For requests concerning order records or support messages available to us, contact my.nagging.ai@gmail.com. Requests concerning information controlled independently by Lemon Squeezy or Google may also be directed to those providers.

We may request enough information to verify the requester and locate the relevant record. A request may be limited where retention or processing is required by law or necessary to establish, exercise, or defend legal claims.

10. Children

Naggy Buddy is a general productivity tool and is not directed to children. The local reminder features do not send browsing or reminder data to us. We do not knowingly collect personal information from a child below the age at which parental or guardian consent is required under applicable law. If a parent or guardian believes a child has provided personal information through a purchase or support request, they may contact us to request review or deletion.

11. Additional notice for users in South Korea

For users in the Republic of Korea, this section supplements the rest of the policy. If consent is required to process the personal information of a child under 14, consent from and verification of the child's legal representative are required. A child should not make a Buddy+ purchase or send personal information in a support request without the involvement of a legal representative where such consent is required.

Users and their legal representatives may request access, correction, deletion, suspension of processing, or withdrawal of consent by emailing my.nagging.ai@gmail.com. We will verify and respond to the request without undue delay in accordance with applicable law.

Users may also seek privacy advice or remedies from the following organizations:

• Personal Information Infringement Report Center: privacy.kisa.or.kr, telephone 118
• Personal Information Dispute Mediation Committee: kopico.go.kr, telephone 1833-6972
• Personal Information Protection Commission: pipc.go.kr

12. Additional notice for users in the EEA, United Kingdom, and Switzerland

Where European data-protection law applies, users may have the right to access, correct, erase, restrict, or object to processing; receive portable data; withdraw consent; and lodge a complaint with their local supervisory authority. The legal bases used for relevant processing are described in Section 6.

Naggy Buddy does not use personal information for automated decisions that produce legal or similarly significant effects. Where a service provider processes relevant information outside the EEA, United Kingdom, or Switzerland, we rely on the provider's applicable contractual and legal transfer safeguards.

13. Security, permissions, and Limited Use

Naggy Buddy restricts Chrome local-storage access to trusted extension contexts, uses HTTPS for license requests, packages executable code with the extension, and does not execute remotely hosted code. No method of storage or transmission is completely secure, but we limit information and access to what is reasonably necessary for the product.

Chrome permissions are used only for reminder timing, local state, focused active-tab hostname matching, idle or locked-state handling, local media-playback checks, favicon display, reminder-overlay injection, and the user-confirmed Close tab action. Optional site access is requested only after a user chooses a nudge site.

Naggy Buddy uses browser and site-access information only to provide its user-facing reminder feature. Its use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

14. Changes and contact

Material changes to this policy will be posted at the same public location with an updated date. Where required, we will provide additional notice or obtain consent before a new data practice takes effect. Previous versions will be retained where reasonably practicable.

Privacy contact

Name

Jimin Lee

Email

my.nagging.ai@gmail.com